Model Inversion Defense on CelebA
94.86AccuracyNo Defense
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| No DefenseTarget Architecture=ResNet-1012024.05 | 94.86 | 83 | — | — | — | — | — | — | |
| No DefenseTarget Architecture=ResNet-182024.05 | 94.22 | 88.46 | — | — | — | — | — | — | |
| BiDOTarget Architecture=ResNet-182024.05 | 91.33 | 76.56 | 4.12 | — | — | — | — | — | |
| MIDAttack=GMI, Backbone=ResNet-1522024.11 | 91.29 | — | — | — | 34.72 | 56.56 | 1,583.22 | 27.53 | |
| MIDAttack=KED-MI, Backbone=ResNet-1522024.11 | 91.29 | — | — | — | 88.7 | 98.08 | 1,127.35 | 17.14 | |
| MIDAttack=LOMMA (GMI), Backbone=ResNet-1522024.11 | 91.29 | — | — | — | 86.98 | 97.3 | 1,219.14 | 42.1 | |
| MIDAttack=LOMMA (KED-MI), Backbone=ResNet-1522024.11 | 91.29 | — | — | — | 95.64 | 99.9 | 1,068.42 | 23.47 | |
| MIDAttack=PLG-MI, Backbone=ResNet-1522024.11 | 91.29 | — | — | — | 99.76 | 99.84 | 853.88 | 21.2 | |
| -Attack=GMI, Backbone=ResNet-1522024.11 | 91.16 | — | — | — | 26.74 | 48.94 | 1,681.49 | 28.2 | |
| -Attack=KED-MI, Backbone=ResNet-1522024.11 | 91.16 | — | — | — | 74.5 | 93.66 | 1,288.24 | 16.39 | |
| -Attack=LOMMA (GMI), Backbone=ResNet-1522024.11 | 91.16 | — | — | — | 83.02 | 96.1 | 1,313.64 | 41.48 | |
| -Attack=LOMMA (KED-MI), Backbone=ResNet-1522024.11 | 91.16 | — | — | — | 90.22 | 98.2 | 1,185.15 | 22.27 | |
| -Attack=PLG-MI, Backbone=ResNet-1522024.11 | 91.16 | — | — | — | 99.34 | 99.82 | 1,025.51 | 16.12 | |
| TL-DMITarget Architecture=ResNet-182024.05 | 91.12 | 22.36 | 21.32 | — | — | — | — | — | |
| BiDOTarget Architecture=ResNet-1012024.05 | 90.31 | 67.26 | 3.46 | — | — | — | — | — | |
| TL-DMITarget Architecture=ResNet-1012024.05 | 90.1 | 31.82 | 10.75 | — | — | — | — | — | |
| BiDOAttack=GMI, Backbone=ResNet-1522024.11 | 90.06 | — | — | — | 25.16 | 46.64 | 1,738.49 | 32.66 | |
| BiDOAttack=KED-MI, Backbone=ResNet-1522024.11 | 90.06 | — | — | — | 67.46 | 88.96 | 1,275.67 | 18.83 | |
| BiDOAttack=LOMMA (GMI), Backbone=ResNet-1522024.11 | 90.06 | — | — | — | 65.96 | 86.9 | 1,416.01 | 49.36 | |
| BiDOAttack=LOMMA (KED-MI), Backbone=ResNet-1522024.11 | 90.06 | — | — | — | 70.86 | 91.3 | 1,293.13 | 25.03 | |
| BiDOAttack=PLG-MI, Backbone=ResNet-1522024.11 | 90.06 | — | — | — | 98.1 | 99.62 | 1,042.27 | 28.48 | |
| No DefenseTarget Architecture=VGG-162024.05 | 89 | 95.67 | — | — | — | — | — | — | |
| UnprotectedDefense=-2024.11 | 87.83 | — | — | 2 | 65 | — | — | — | |
| No DefenseAttack=PLG-MI+, Backbone=VGG-162024.11 | 87.83 | — | — | — | 98.78 | 99.9 | 1,086.8 | 12.88 | |
| Trap-MIDAttack=GMI, Backbone=ResNet-1522024.11 | 87.23 | — | — | — | 0.06 | 0.52 | 2,475.04 | 165.47 | |
| Trap-MIDAttack=KED-MI, Backbone=ResNet-1522024.11 | 87.23 | — | — | — | 0.58 | 2.08 | 2,266.56 | 84.31 | |
| Trap-MIDAttack=LOMMA (GMI), Backbone=ResNet-1522024.11 | 87.23 | — | — | — | 45.7 | 73.3 | 1,571.89 | 43.66 | |
| Trap-MIDAttack=LOMMA (KED-MI), Backbone=ResNet-1522024.11 | 87.23 | — | — | — | 69.86 | 91.8 | 1,370.98 | 23.36 | |
| Trap-MIDAttack=PLG-MI, Backbone=ResNet-1522024.11 | 87.23 | — | — | — | 3.56 | 11.16 | 2,016.62 | 73.84 | |
| No DefenseBackbone=VGG-16, Attack=GMI2024.11 | 86.21 | — | — | — | 14.29 | 32.64 | 1,798.23 | 31.01 | |
| No DefenseBackbone=VGG-16, Attack=KED-MI2024.11 | 86.21 | — | — | — | 56.46 | 82.84 | 1,404.85 | 17.1 | |
| No DefenseBackbone=VGG-16, Attack=PLG-MI2024.11 | 86.21 | — | — | — | 95.81 | 99.43 | 1,174.13 | 12.77 | |
| NegLSAttack=GMI, Backbone=ResNet-1522024.11 | 83.93 | — | — | — | 8.2 | 23.62 | 1,790.67 | 36.79 | |
| NegLSAttack=KED-MI, Backbone=ResNet-1522024.11 | 83.93 | — | — | — | 37.92 | 67.18 | 1,481.29 | 32.18 | |
| NegLSAttack=LOMMA (GMI), Backbone=ResNet-1522024.11 | 83.93 | — | — | — | 65.8 | 86 | 1,322.77 | 37.84 | |
| NegLSAttack=LOMMA (KED-MI), Backbone=ResNet-1522024.11 | 83.93 | — | — | — | 86.74 | 98.1 | 1,208.54 | 36.68 | |
| NegLSAttack=PLG-MI, Backbone=ResNet-1522024.11 | 83.93 | — | — | — | 94.82 | 99.44 | 1,398.07 | 117.98 | |
| TL-DMITarget Architecture=VGG-162024.05 | 83.41 | 75.67 | 3.58 | — | — | — | — | — | |
| NegLSBackbone=VGG-16, Attack=GMI2024.11 | 81.99 | — | — | — | 7.8 | 23.1 | 1,797.49 | 40.92 | |
| NegLSBackbone=VGG-16, Attack=KED-MI2024.11 | 81.99 | — | — | — | 32.45 | 62.13 | 1,543.7 | 39.02 | |
| NegLSBackbone=VGG-16, Attack=PLG-MI2024.11 | 81.99 | — | — | — | 89.38 | 97.81 | 1,412.19 | 69.02 | |
| NegLSDefense=NegLS2024.11 | 81.76 | — | — | 3 | 52 | — | — | — | |
| NegLSAttack=PLG-MI+, Backbone=VGG-162024.11 | 81.76 | — | — | — | 92.2 | 98.38 | 1,395.18 | 77.32 | |
| Trap-MIDDefense=Trap-MID2024.11 | 81.62 | — | — | 171 | 0 | — | — | — | |
| Trap-MIDAttack=PLG-MI+, Backbone=VGG-162024.11 | 81.62 | — | — | — | 74.26 | 81.86 | 1,356.54 | 24.03 | |
| Trap-MIDAttack=PLG-MI++, Backbone=VGG-162024.11 | 81.62 | — | — | — | 70.44 | 78.14 | 1,399.84 | 27.17 | |
| Trap-MIDAttack=PLG-MI, Backbone=VGG-162024.11 | 81.37 | — | — | — | 6.23 | 13.15 | 2,055.96 | 57.82 | |
| Trap-MIDBackbone=VGG-16, Attack=GMI2024.11 | 81.37 | — | — | — | 0.24 | 1.16 | 2,411.39 | 153.73 | |
| Trap-MIDBackbone=VGG-16, Attack=KED-MI2024.11 | 81.37 | — | — | — | 9.24 | 19.24 | 2,056 | 87.39 | |
| Trap-MIDBackbone=VGG-16, Attack=PLG-MI2024.11 | 81.37 | — | — | — | 6.23 | 13.15 | 2,055.96 | 57.82 | |
| BiDOTarget Architecture=VGG-162024.05 | 80.35 | 70.47 | 2.91 | — | — | — | — | — | |
| BiDODefense=BiDO2024.11 | 79.62 | — | — | 3 | 39 | — | — | — | |
| BiDOAttack=PLG-MI+, Backbone=VGG-162024.11 | 79.62 | — | — | — | 89.64 | 97.96 | 1,222.26 | 16.89 | |
| BiDOBackbone=VGG-16, Attack=GMI2024.11 | 78.97 | — | — | — | 4.92 | 14.03 | 2,020.05 | 46.79 | |
| BiDOBackbone=VGG-16, Attack=KED-MI2024.11 | 78.97 | — | — | — | 34.84 | 62.42 | 1,530.94 | 20.95 | |
| BiDOBackbone=VGG-16, Attack=PLG-MI2024.11 | 78.97 | — | — | — | 89.18 | 97.64 | 1,242.04 | 16.82 | |
| MIDBackbone=VGG-16, Attack=GMI2024.11 | 77.89 | — | — | — | 9.88 | 23.58 | 1,894.38 | 35.6 | |
| MIDBackbone=VGG-16, Attack=KED-MI2024.11 | 77.89 | — | — | — | 53.24 | 80.08 | 1,413.49 | 18.45 | |
| MIDBackbone=VGG-16, Attack=PLG-MI2024.11 | 77.89 | — | — | — | 92.72 | 98.64 | 1,149.64 | 14.36 | |
| MIDDefense=MID2024.11 | 76.67 | — | — | 2 | 46.33 | — | — | — | |
| MIDAttack=PLG-MI+, Backbone=VGG-162024.11 | 76.67 | — | — | — | 87.64 | 97.38 | 1,208.6 | 15.41 | |
| No DefenseTarget Architecture=ResNet-342024.05 | 69.27 | 39.4 | — | — | — | — | — | — | |
| TL-DMITarget Architecture=ResNet-342024.05 | 62.2 | 23.7 | 2.22 | — | — | — | — | — | |
| BiDOTarget Architecture=ResNet-342024.05 | 61.14 | 30.25 | 1.13 | — | — | — | — | — |